sanjay.hona
Local time in Ottawa, Canada:--:--ET

log stream · 5 entries

Field notes

DevOps, SRE, AIOps, and cybersecurity. What changed this week, why it matters, and what to check in your own systems. Written for the person on call.

  1. git add --resolved: Stop Committing Conflict Markers

    git add . silently stages leftover conflict markers and stray edits. Git 2.56 adds git add --resolved, which refuses. Lab output and an old-Git fix.

    #git#terminal7 min read

  2. GCP europe-west2-b Outage: Why the Generators Never Started

    A PLC read voltage on a disconnected feed and never started the generators, so a Google Cloud London zone went dark. Check your zonal blast radius.

    #sre#gcp#incident-response#postmortem#availability9 min read

  3. ingress-nginx CVE-2026-116472: No Patch, Block mirror-target

    One ingress-nginx annotation can drop all traffic through the controller, and no upstream fix is coming. Block mirror-target with a ValidatingAdmissionPolicy.

    #kubernetes#security#ingress-nginx#admission-control7 min read

  4. SLO Burn-Rate Alerts: Stop Paging 54 Minutes After Recovery

    A 1h burn-rate alert kept firing 54 minutes after errors stopped. Add a 5m short window in Prometheus, prove it with promtool, and page only while budget burns.

    #sre#prometheus#alerting#slo#observability8 min read

  5. testmetest: AI Agent Hook Backdoors Code Search Missed

    A worm armed 42 GitHub repos with AI agent hooks and 13 MB payloads code search skips. Audit repos from Git objects and run agents with hooks off.

    #security#supply-chain#github#git#claude-code7 min read